Board Model Risk Reporting Template
Executive Summary
Key Takeaways
- ✓ Board reporting on model risk should be aggregated and tiered, not a model by model walkthrough.
- ✓ The board needs to see which models are high tier and whether they have been independently verified, not the underlying findings log.
- ✓ A model risk report to the board should track trend over time, not just a single point in time snapshot.
- ✓ Silence on model risk in board reporting is itself a governance gap worth surfacing.
- ✓ This template sits above the individual audit report and the governance policy; it is the aggregation layer between them.
Purpose¶
A board overseeing an organisation that relies on financial models for material decisions carries a form of exposure it rarely sees directly: the aggregate model risk sitting across every model in active use, not just the one model attached to the deal currently in front of it. Most organisations have no structured mechanism for surfacing this to the board at all.
This template describes how to report model risk to a board in aggregate, tiered by materiality, consistent with the governance concepts introduced on the Financial Model Governance pillar page.
Who Should Use This Template¶
- Boards and board secretariats wanting a defined format for model risk oversight rather than ad hoc updates.
- CFOs and model governance owners preparing periodic reporting to the board.
- Advisory firms supporting a client's governance function in building board level reporting.
Template Structure¶
| Section | Purpose | Typical content |
|---|---|---|
| 1. Portfolio Overview | Orients the board | Total number of models in the inventory, tier breakdown, change since last report |
| 2. High Tier Model Status | The board's primary focus | List of high tier models, audit status (verified / not verified / overdue), last review date |
| 3. Findings Summary | Aggregated, not detailed | Number and severity of material findings across high tier models, trend versus prior period |
| 4. Governance Compliance | Confirms the policy is working | Percentage of high tier models reviewed on schedule, any policy exceptions and why |
| 5. Emerging Risk Areas | Forward looking | New model types, new asset classes, or growth in inventory size that may require policy revision |
| 6. Recommendations | Action oriented | Specific governance actions requested of the board, budget, policy change, escalation |
How to Use It¶
Report at the tier level, not the individual model level, except for Section 2, where high tier models should be named specifically because the stakes justify board level visibility into each one. Lower tier models should appear only as aggregate counts.
Section 4, Governance Compliance, is the section most often omitted, and the one that gives the board its clearest signal: is the governance policy, described on the Model Governance Policy Template, actually being followed. A high compliance percentage with no material findings is a materially different signal than a high compliance percentage with several unresolved high severity findings, and the report should make that distinction visible.
Common Pitfalls¶
Reporting model by model. A board asked to review every model individually will either disengage or spend its time at the wrong level of detail. Aggregation and tiering exist specifically to prevent this.
Omitting unaudited high tier models. If a high tier model has not been independently verified, this is precisely the fact the board needs to see, not a gap to quietly close before the next report.
No trend view. A single snapshot report tells the board where things stand today, not whether model risk is improving or deteriorating, which is the more useful signal over time.
Treating this as a one-off exercise. Board model risk reporting is only useful as a recurring, comparable series, not a one-time presentation.
Continue Reading¶
Related Pillars¶
Related Glossary¶
Related Checklists¶
Related Resources¶
Related Products¶
How OXXON tests thisRun a free structural check with FMAE
Frequently Asked Questions
Why does model risk need its own board report?
Because board level decisions are frequently made on the basis of models the board itself has no direct visibility into, and without an aggregated report, the board has no systematic way to know where its own exposure sits.
How is this different from an individual audit report?
An audit report addresses one model in detail. This template aggregates across an organisation's full model inventory, at a level of detail appropriate for board oversight rather than technical review. See the Financial Model Audit Report Template.
What does "tiered by materiality" mean in this context?
Grouping models by how much is at stake if they are wrong, so the board's attention is drawn to the highest tier models first, rather than treating every model in the inventory as equally important. See Model Tiering.
How often should this report go to the board?
This varies by organisation, but a fixed cadence, quarterly or semi-annually is common, aligned to the model governance framework's own review cycle, is more effective than ad hoc reporting.
What should the board actually do with this report?
Use it to confirm governance is functioning, that high tier models have in fact received the level of scrutiny the policy requires, and to challenge management where gaps appear.
Should unaudited high tier models be flagged explicitly?
Yes. A high tier model that has not been independently verified is precisely the exposure this report exists to surface, not to obscure.
Does this report replace the model governance policy?
No. The governance policy defines the rules; this report shows the board whether those rules are being followed in practice. See the Model Governance Policy Template.
Is this template relevant outside regulated banks?
Yes. Any board relying on models for material decisions, private equity, family offices, corporates, benefits from this level of aggregated visibility, not only regulated financial institutions.
References
Related Articles
What Is Model Risk?
Model risk is the risk that a decision is wrong not because the underlying business or investment case was flawed, but because the model used to evaluate it was. It is a distinct category of risk from market risk, credit risk, or operational risk, and it applies to any organisation that relies on a financial model, spreadsheet or otherwise, to support a material decision. Most published model risk content addresses statistical and regulatory capital models used inside banks. This page defines model risk specifically as it applies to Excel based financial models, the kind used every day for investment decisions, lending, and transaction evaluation, which is a related but distinct problem from the quantitative model risk literature most search results return.
What Is Financial Model Governance?
Financial model governance is the set of policies, roles, and controls an organisation puts in place to manage the risk that comes from relying on financial models for material decisions. It is the organisational layer that sits above any individual financial model audit: governance determines when a model gets audited, who owns that decision, how versions are tracked, and what happens to findings once they exist. Most published governance content online is written for large, tier one banks operating under formal regulatory regimes. A private equity firm, a family office, or a mid market corporate finance team rarely has that scale of infrastructure, and does not need it, but still carries real exposure if no governance exists at all. This page defines governance at the level that actually applies to most organisations relying on Excel models, not just the largest ones.